Signup abuse detection and blocking 1.17.2

• Adjust signup approve/moderate/reject logic to consider hard/score reject, then hard/score moderate rather than hard reject/moderate then score reject/moderate.
• Fix installer on new installs to migrate XF1 legacy logs & reports
  • Fix XF1 report migration code, if multiple account reports show 0 accounts then a selective database restore is required (xf_report table). A script is avaliable to extract the required data, and then re-run migrations. Please open a ticket if this issue affects your site.

• Remove "Show user registration record in user approval queue" option as this is the XF default now

• Compatibility fix for New Registration Email (multiple-account not linking to detected account due to non-canonical URLs)

• Add work-around for possible race conditions & duplicate key exceptions

• Fix error bumping a multi-account report

• If a user is rejected due to score, do not apply direct moderate user rules
• Rename option "Show user registration records on user profile tab" to "Show user multiple account records on user profile tab"

• Adjust thread/conversation creation options to link to multiple accounts to Thread/Conversation add-ons.
• Show detection date in user registration log
• Add "Show user multiple account records on user profile tab" option

• Fix "[E_NOTICE] Undefined variable: reportData" when handling XF1 AED cookies

• Change "Login Flood Limit" option to default disabled (does not change existing installs)
• Do a multi-account check even if the user login is rate limited
• Ensure tracking cookie is set on logout if it has not been set, and add some additional sanity checks around the cookie being set

• Move user notifications of detected multiple accounts outside of transaction
• Prevent unique constraint violations when processing a multiple account report which hasn't been linked to a multiple account detection event